Tag: data leak

  • Uber Files Leak: What Was Revealed, How Was It Leaked and Has Uber Changed?

    The online and offline media headlines are screaming about the global ride-hailing platform Uber and its unethical practices over the years to emerge as a global leader.

    On Sunday morning, the world woke up to shocking news of  ‘The Uber Files’. Originally leaked to ‘The Guardian’ and ‘The Internal Consortium of Investigative Journalists’, it was a treasure trove of almost 124,000 documents. These documents showed just how the tech giant was able to expand with rapidity and the illegal and often violent techniques it resorted to achieve.

    On Monday, the shockwaves continued as Mark MacGann, Uber’s former chief lobbyist for Europe, the Middle East and Africa, identified himself as the source of the leaked data. Seeking higher ground, he said – “It is my duty to speak up and help governments and parliamentarians right some fundamental wrongs. Morally I had no choice in the matter.”

    About Uber
    Business Model of Uber
    What Do the Uber Documents Leak Reveal?
    What Did and Did Not Change at Uber Post 2017?

    About Uber

    Founded as Ubercabs in San Francisco in 2009, by Garret Camp and Travis Kalanick, it came to be known as Uber Technologies, Inc. It is an American mobility service provider, allowing users to book taxis for transport via the Uber App.  

    Over the years, it has added various services like food delivery, package delivery, couriers, freight transportation, electric bicycle and motorized scooter through partnerships with various local operators.

    Since 2013, Uber saw unprecedented growth across countries and emerged as the most popular ride-hailing company. In the fourth quarter of 2021 Uber had 118 million monthly active users globally and generated approximately 19 million rides a day.

    Uber has received criticism for its treatment of taxi drivers, disruption of the taxicab businesses and an increase in traffic congestion. It has also been questioned about the low rates and heavy discounts it offers on its ride-share app, thus undercutting taxi drivers and forcing its partners to take lesser pay.

    Unsurprisingly, Uber has reported losses of millions of dollars since 2014.  In 2018, it exited markets in Russia, China and Southeast Asia in exchange for stakes in rival businesses.

    Global Net Revenue of Uber
    Global Net Revenue of Uber

    Business Model of Uber

    Uber acts as the intermediary between cabs and riders. It does not own any vehicles, but partners with taxi owners and receives a commission for each booking. The dynamic pricing model of Uber is based on the local supply and demand at the time of the booking. This fare is quoted to the customer in advance.

    What Do the Uber Documents Leak Reveal?

    Uber has courted controversy since 2009, when it was founded, from violent conflicts among drivers to the use of secret software to evade law enforcement.

    ‘The Uber Files’ span a period of 5 years, from 2013 to 2017, when it was run by its controversial co-founder Travis Kalanick. Kalanick was forced out of Uber in 2017 following constant controversies including allegations of data breach and sexual harassment scandals.

    Travis Kalanick, co-founder of Uber
    Travis Kalanick, co-founder of Uber

    The period of his reign at Uber is controversial and shows how he utilised that chaos to speed expansion. He spearheaded Uber’s expansion globally, albeit with illegal practices and lobbying with government heads to push through favourable laws.

    Launch of Uber in Paris

    In 2014, Uber launched in Paris – its first European launch. Kalanick established contact with Emmanuel Macron (President, France), who was then, the economy minister. Macron interceded on Uber’s behalf, even brokering secret deals with opponents in the cabinet, to help Uber operate undisturbed in Paris.

    Entry into German Market

    In 2014, the then mayor of Hamburg, Olaf Scholz (currently the German Chancellor), pushed against Uber lobbyists to ease the way for Uber to enter the German market.

    Taking the help of Joe Biden

    Kalanick had a meeting scheduled with the then, US Vice-President, Joe Biden at the World Economic Forum. The after effect of the meeting was an amended statement to his prepared speech at Davos when he referred to a CEO whose company would give millions of workers freedom to work as many hours as they wished and manage their lives the way they want to.

    Kill Switch

    Uber took extensive steps to save itself from authorities. In addition to lobbying with politicians and government officials, Uber had also installed a ‘kill switch’ which they activated to stop the authorities from accessing the company’s computers. The ‘kill switch’ was used in Amsterdam, Canada, Belgium, India, Romania, Hungary and France.

    Endangering Drivers

    Kalanick’s theory of embracing chaos included endangering drivers. Almost every market that Uber entered, triggered organised protests from taxi driver unions, that would sometimes turn violent. He mutely agreed to Uber drivers going to such protests. His ideology? “Violence guarantees success”.

    The documents indicate Uber’s adeptness at finding unofficial routes to power.  It shows a company that had a deliberate strategy of breaking or ignoring laws, and that it was very much aware of it.

    The documents go on to reveal the role that lobbying and relationships with powerful politicians played in its global success. They also reveal that company executives were aware of the illegality of their entire operation.

    Uber’s original idea of citizens driving citizens in their private cars without any permits or licenses mostly fell into a grey area legally.

    Post 2017 – What Did and Did Not Change at Uber?

    The chaos that Kalanick capitalized on has grown Uber to a USD 43 billion dollar company. However, soon after Kalanick was replaced by Dara Khosrowshahi accusations about the workplace culture and sexism seem to have stopped.

    Dara Khosrowshahi, CEO of Uber
    Dara Khosrowshahi, CEO of Uber

    The company seems to have toned down its aggressive approach and now works with licensed drivers using specific permits. Despite all this, it faces multiple lawsuits regarding its employment strategies and its profitability remains in question.  

    Secondly, although it seems to now work in compliance, it does so only as little as necessary to get away from the attention of the authorities. They are not openly breaking rules anymore, but even its new business model remains close to its previous one. It continues to push for its preferred laws and regulations through courts or by finding legal loopholes.


    Ola Success Story – Funding, Founders, Team, Revenue and more
    Formerly known as Ola Cabs, Ola was founded in December 2010 by Bhavish Aggarwal and Ankit Bhatia. Here is the story of Ola, and how it all started for them!


    Conclusion

    The details of the expose will continue to grow in the coming days as more details will be made public. What is learned from all this is that apps like Uber and many others promised innovation.

    Instead, they brought out barely disguised models of corruption and exploitation. One can only hope that there are severe penalties for tech entrepreneurs who blatantly break and bend laws. Maybe it will act as a deterrent for future cons.

    FAQs

    What is the Uber leak?

    Uber leak is a trove of 124,000 documents that show how the ride-hailing giant expanded its operations using illegal tactics.

    Who leaked the Uber Files?

    Mark MacGann, Uber’s former chief lobbyist for Europe, the Middle East and Africa came forward to take responsibility for the leaks.

  • How did Air India suffer a massive data breach and why should you be concerned about it?

    There has been a lot of recent incidents related to data breaches from different companies which include the top companies in and around the country. The most recent data breach was reported by the well-known airline of India, Air India. Let’s look at the information about the data breach faced by the airline.

    About the Air India Data breach
    What is SITA?
    Details of the Air India Data breach
    Steps taken by Air India after the Data Breach
    How does the Data breach Affects you?
    FAQ

    About the Air India Data breach

    Air India has conveyed that the data of millions of passengers have been compromised due to a cyber attack and it involves the personal data of the passengers registered between 26 August 2011 and 20 February 2021.

    The airline has announced that the data breach had taken place due to a breach from the SITA passenger service system and the data breach involved the information of around 45 lakh passengers.

    What is SITA?

    SITA is a technology based company which is located in Switzerland. The company specializes in information technology and air transport communications. The country that was started with a 11-member airline now has a customer base of 2,500 customers in more than 200 countries across the globe.

    Some of the services offered by the company include reservation systems, passenger processing, etc. In the year 2017 Air India had entered into a deal with SITA to enable the airlines to join Star Alliance by updating its IT infrastructure.


    Jet Airways Case Study | Jet Airways Bankruptcy and Possible Revival
    The Jet Airways case study is now so popular that it is mentioned in almostevery Business School’s curriculum due to the airline’s unimaginable debacle.Founder Naresh Goyal [https://startuptalky.com/naresh-goyal-jet-airways/] is beinginvestigated by the Enforcement Directorate (ED) and a large nu…


    Details of the Air India Data breach

    In the month of March, Air India had communicated that SITA had been under a cyberattack in the last week of February which led to the leakage of personal information of its passengers.

    The company in a statement had mentioned that the data of around 45 lakh passengers have been compromised due to the cyber attack from across the world. The personal data that were registered in between 26 August 2011 and 20 February 2011 have been compromised.

    The company has conveyed that the data that were breached during the cyber attack included the name, date of birth, contact details, passport information, ticket information, frequent flyer data and even the credit card information.

    Steps taken by Air India after the Data Breach

    The airlines have conveyed that it would launch an investigation into the incident. Other than this they have conveyed that, they have taken steps to secure the compromised servers, engaging certain external specialists of data security incidents, resetting passwords of its frequent flyer programme and contacting the credit card customers.

    Global Average Total cost of Data breach
    Global Average Total cost of Data breach

    Everything you Need to know about Facebook Data leak
    On 2 April 2021, around 533 million Facebook users data were leaked in a lowlevel hacking forum. The published information includes Phone numbers andpersonal data. The data was leaked online and uploaded for free in low levelhacking forums. The data breach was found by the co-founder and the Chi…


    How does the Data breach Affects you?

    This data breach would affect you as an individual only if you have used to airline services in between the mentioned dates. The important point is that the credit card information has also been compromised and it can be a threat to your credit card.

    However, Air India has assured its passengers that they were no evidence of any misuse of the compromised data, the airline has asked everyone to change the passwords of their confidential data which includes your credit card password and frequent flyer programme.

    FAQ

    What data got leaked in the Air India data breach?

    The personal data of around 45 lakh passengers were leaked, which includes name, date of birth, contact details, passport information, ticket information, frequent flyer data and even the credit card information.

    How did Air India faced a data breach?

    Air India announced that the data breach had taken place due to a breach from the SITA passenger service system.

    Who took over Air India?

    Tata Sons Ltd were the frontrunner in acquiring Air India.

    Conclusion

    Cyberattacks have been reported frequently by different companies and are posing a serious threat towards the privacy of individuals. The rise in digitalization across the globe has led to an increase in the cyber crimes and cyber attacks by the criminals.

  • How did Upstox suffer a data breach and What does it mean for the users

    Upstox is the leading discount broker in the country. Upstox was formerly known as RKSV technologies. Upstox is backed by some of the top investors in the country which include Tiger Global and Ratan Tata. The company has nearly 30 Lakh users making it the second-largest stockbroker in the country.

    Over the last few years, Upstox has increased its client base and ramped up its operations because of the easy availability of Smart Phones and cheap data prices. Recently Upstox had signed up with the Board of Cricket in India to be one of the sponsors of the Indian Premier League (IPL)

    The company has announced and passed on an alert to their customer of the data breach. Let’s look at the further details of the data breach.

    How Upstox suffered a Data breach
    Measures taken by Upstox
    Measures taken by Upstox for the customers
    Funds and Securities of the customers
    FAQ

    How Upstox suffered a Data breach

    Retail broking firm and one of the leading discount brokers of the country Upstox had alerted its customers that there has been a data breach in the company. They have told that details such as contact data and KYC details of the customers have been breached.

    A spokesman of the company through an email statement had said that the hackers’ group has put the sample of the data on the Dark Web. The spokesman of the company added on saying that for now, the company is not exactly sure about the certainty of the number of customers whose data has been exposed.

    It is estimated that around 25 lakhs of its customers KYC data and contact numbers have been gained access by the hackers. This incident has happened in the midst of data breaches in some of the leading domestic companies and global giants such as LinkedIn, Facebook and Mobikwik.

    Upstox Data breach
    Upstox Data breach

    Why Password manager is Essential for your Business in 2021
    Password Managers are considered to be essential even if it for your personaluse or a business. In the recent years with the increase of cyber crimes andvarious other cyber related activities, it is always wise to choose a passwordmanager for your business or an enterprise. Let’s look at some of …


    Measures taken by Upstox

    The company has said that they had received receipts of emails that claimed unauthorized access to their databases. In response to it, the company has appointed a leading international cyber-security firm that will investigate the possibilities of the data breach of KYC details of customers. They would investigate on the KYC data stored in third-party data warehouse systems.

    The spokesman of the company has added that as a proactive measure the company has taken steps to initiate multiple security enhancements which will particularly concentrate on the third-party warehouses.

    The company has also taken steps to increase real-time monitoring to 24/7 and adding an additional ring-fencing to its network said the spokesman of the company.

    He added that the company has ensured to restrict the access to the databases which has impacted in the breach. The company has also added multiple security enhancements at all third-party warehouses.

    Upstox has taken measures to speed up its bug bounty programme to encourage the ethical hackers to stress-test its systems and protocols. This is a step taken by the company where it makes ethical hackers to hack into their systems to understand the vulnerabilities and identify the problems in the safety of the company’s data. This activity will be undertaken from time to time in regular intervals.


    Can you Rely on a Password manager in 2021
    A password manager has a lot of benefits. It would help you in a lot of ways andthe doubt which you would have in your mind would be “Can I rely on a passwordmanager”. You can read the below article to get a clear understanding of whetherpassword managers are reliable or not. Security and Conven…


    Measures taken by Upstox for the customers

    The company has taken an abundant caution towards the security of the customers. The company has taken the initiative to provide a secured password reset through OTPs for all its customers. The company has said that they take the safety of customers very seriously.

    The CEO of the company Ravi Kumar has said that this time the company has strongly fortified its systems to the most highest standards to ensure higher safety.

    The company has always made the customers to use unique passwords that are strong. They have ensured that the customers would change their passwords in regular intervals and stressed on not to share their OTPs with anyone.

    The company has said that it has also taken steps to warn the customers about the online frauds and to double-check the legitimacy of the links and senders. They have asked the customers to keep a check on the OTPs they receive and the ones they have requested.

    Upstox has always asked its customers to report and alert the service providers if they notice such activities.


    Top 5 Technologies That Can Change The Future Of Cybersecurity
    Cybersecurity is at the tipping point entering 2021. Advances in AI and ML areaccelerating its technological progress. Technology which can take us forwardand empower us, can also show the flip side that is Cyber Crime. By creating cybersecurity systems that encourage diversity and value equality…


    Funds and Securities of the customers

    The spokesperson of Upstox has said that, the funds and securities of all Upstox customers are safe and have been protected by the company.

    Ravi Kumar who is the CEO and Co-founder of the company has also tweeted about it saying that funds and securities of the customers are protected and kept safe by the company.

    FAQ

    Is Upstox funded by Ratan Tata?

    Yes. Upstox is an online discount stock broker backed by funding from Mr. Ratan Tata. He held 1.33% stake in the company As of Jan 2020.

    Who is owner of Upstox?

    Founders of RKSV Securities (Changed to Upstox Later) are Ravi Kumar, Raghu Kumar and Shrinivas Viswanath are the owner of Upstox.

    Is Upstox SEBI registered?

    Yes, It is registered with the Securities & Exchange Board of India (SEBI) as a stock broker.

    Conclusion

    These are the steps taken by Upstox regarding their data breach.

  • Everything you Need to know about recent Facebook Data leak

    On 2 April 2021, around 533 million Facebook users data were leaked in a low level hacking forum. The published information includes Phone numbers and personal data. The data was leaked online and uploaded for free in low level hacking forums.

    The data breach was found by the co-founder and the Chief Technical Officer of Hudson Bay, Alon Gal. Hudson Bay is a cybersecurity firm. He found the cache of the leaked data online on 3 April 2021.

    Leaked data
    Previous Data Breach of Facebook
    Various possibilities to misuse the data
    Legal Solution in India
    FAQ

    Leaked data

    According to Alon Gal, all your details on Facebook which include your name, occupation, gender, marital status, relationship status, the date of joining on Facebook, the place where you work, the date of joining your occupation, your Facebook bio, etc. He said in some cases even your Email ids and Phone numbers would have been leaked on the internet.

    It is said that the exposed data includes the personal information of 533 million users across 106 countries. It is estimated that 36 million personal information has been leaked from the U.S, 11 million users personal information has been leaked from the U.K and around 6 million users personal information has been leaked from India, 8 million personal information from Brazil 3.8 million users personal information from Bangladesh, 1.2 million users personal information from Australia, etc.

    These are some of the major countries whose users data have been released on the internet.

    Previous Data Breach of Facebook

    This is not the first time the data from Facebook has been leaked on the internet. In the year 2019 the same data, the data of 419 million users was leaked. It was being sold on telegram an instant messaging platform by charging a fee of $20 per search.

    2019 Facebook Data Leak
    2019 Facebook Data Leak

    Similarly, the data was leaked in the month of June 2020 as well. Now the data has been leaked again and this time anyone who requires the data can access it for free from low level hacking forums. It is easily accessible to any individual who can misuse it.

    Alon Gal has said that he discovered the leaked data in the month of January 2021 for the first time. It was through an advertisement by a hacking forum of an automated bot. The automated bot could provide phone numbers for hundreds of millions of Facebook users in return for a particular amount of money.

    The Motherboard had reported on that bot’s existence during that point of time and also verified that the data was legitimate. He added that if you have a Facebook account then it is extremely likely that the phone number you used for your account was leaked online. Cyber researcher Dave Walker confirmed that Mark  Zuckerberg’s  data was also leaked that revealed that he uses its competitors Signal messaging app.



    Privacy Focused Messaging Apps you should use in 2021
    We all have private discussions, yeah, private! If it’s an embarrassing story, abureau gossip, or opening your emotions, and the last thing you expect issomeone to see or use your messages to serve your ads. You can leave anythingexposed unless you use an encrypted chat program. As per the most …


    Various possibilities to misuse the data

    The leaked data is easily accessible by anybody on the internet. It can be used on different individuals for various cybercrimes. The details can be used and exploited by advertisers to target their set of customers to push targeted advertisements.

    The data can also be used by hackers to perform hacking attempts or social media engineering attacks. In simple terms, they can use your data to hack your social media profiles. Even an individual with the basic level or underdeveloped data skill can use the leaked data to perform certain Cybercrimes.

    In the year 2018, it was said that the political firm called Cambridge Analytica had mined the data from 50 million Facebook profiles. The firm had mined and gathered the data and later used it to help the political candidate from across the globe to target their candidates and making them win the elections. This was also covered in a Netflix documentary – The Great Hack.

    2018 Facebook-Cambridge Analytica Scandal
    2018 Facebook-Cambridge Analytica Scandal

    This was revealed after the backdrop of the U.S presidential elections of 2016 and the referendum of Brexit.

    According to Alon Gal, the leaked data could provide valuable information to cybercriminals who use people’s information to scam them or impersonate them into handing over their login credentials.

    He also said that the huge information and the phone numbers which are leaked on the internet will lead certain bad actors to easily take advantage of the data.


    Startup News for the Week by StartupTalky| April 2021
    Startup Ecosystem has changed the outlook on business and enterprises, and hasimpacted our economy, budgets, and a lot more. Here we bring you fresh news onstartups their operations, budgets, and all the new technology they bring forth.This week’s startup headlines include funding and investment …


    India is yet to have a strict data protection regulatory bill. Several countries in the West have Data Protection Regulation. In India, a bill names the Personal Data Protection bill is yet to be passed in the Lok Sabha. It has been pending since 2019.

    The bill is said to contain certain provisions regarding to the breach of personal data. However, one can rely on sections 43A and 72A of the Information Technology Act of 2000. This article provides compensation in the case of improper disclosure of personal information.

    From a security point of view, there is nothing much Facebook can do about the data leak of the users since it is already leaked on the internet and it has affected the users said, Alon Gal.

    FAQ

    How did Facebook leak data?

    The recent data breach is believed to relate to a vulnerability which Facebook reportedly fixed in August of 2019. While the exact source of the data can’t be verified.

    How to check if your Facebook data was leaked?

    haveibeenpwned.com is a site developed by Australian web-security consultant Troy Hunt, where you can enter your phone number or email address and see the result.

    How does Facebook make money from data?

    Facebook  makes most of its money by serving ads on the social media and messaging platforms it owns — Facebook, Messenger, Instagram, and WhatsApp. Advertisers pay Facebook to make their ads visible to people.

    Conclusion

    Alon Gal added on saying that what Facebook could possibly do is notifying users, so that they could stay cautious on certain phishing schemes or frauds using their personal data.